Go Back   FlashFXP Forums > > > >

Bug Reports If you discover any bugs that we are not aware of, please post it here so it may be corrected.

 
 
Thread Tools Rate Thread Display Modes
Prev Previous Post   Next Post Next
Old 06-21-2003, 10:12 AM   #1
Zer0Racer
Senior Member
ioFTPD Scripter
 
Join Date: Oct 2002
Posts: 703
Exclamation Bug in [Change-Permissions]

When testing gadmin stuff I stumbled onto something...

Seems gadmins (users with G flag) AND regular users can access certain commands that they are not supposed to.

When gadmin/user tries to SITE CHANGE groups other than their own and users NOT in gadmin's primary group:
Code:
[Change-Permissions]
admingroup        = 1M		Permissions denied.
credits           = 1M		Permissions denied.
flags             = 1M		Permissions denied.
groupdescription  = 1M		Command successful. <-- Bug!
groupslots        = 1M		Command successful. <-- Bug!
groupvfsfile      = M		Command successful. <-- Bug!
homedir           = 1GM		User is not in your primary group. Command successful. (but no change)
logins            = 1M		Permission denied.
passwd            = 1GM		User is not in your primary group. Command successful. (but no change)
ratio             = 1GM		User is not in your primary group. Command successful. (but no change)
stats             = M		Permission denied.
tagline           = 1GM		User is not in your primary group. Command successful. (but no change)
vfsfile           = M		Permission denied.
Only tested on ioFTPD 4.9.4r.
Zer0Racer is offline  
 

Tags
denied, gadmins, permissions, users, [change-permissions]


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Compare Folder Content -- SUBDIRS too? dgrrr General Discussion 1 04-04-2005 08:28 PM


All times are GMT -5. The time now is 02:05 PM.

Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)